Setup Server DB encryption with Windows Credential Manager

[kenkendk]

@redusr

internet or network address: localhost:8200 (host name of the running duplicati application)
Username: duplicati-server (username to be referred to in argument --settings-encryption-key)
Password: <password to be set and subsequently used>

From what I recall the “Internet or network address” is mislabelled in the Windows UI as it is actually called “TargetName” in the Windows API and can be any string. This is the name that you refer to with the secret manager.

@redusr

"C:\Program Files\Duplicati 2\Duplicati.GUI.TrayIcon.exe" --secret-provider=wincred:// --settings-encryption-key=$duplicati-server

Is this how it works?

Yes, that is how it works.

@redusr

Specifically, does Duplicati use the --settings-encryption-key-value as mapping for the Username in credentials manager or for the internet or network address field?

The translation will look for $duplicati-server and check the Windows Credentials for an entry with the “internet or network address” value “duplicati-server”, and then replace it with the password. The username is not currently used by Duplicati.

If any of the values cannot be resolved, the start will fail.

For a slightly better testing experience, you can use the commandline and then:

Duplicati.CommandLine.SecretTool.exe test wincred:// duplicati-server

The output will tell you if the lookup works.